For the first bug, an attacker can trigger a buffer overflow in the camera by pinging it an overlong Wi-Fi SSID parameter via Bluetooth Low Energy (BLE). The second flaw is similar, but in this case the miscreant sends a long Wi-Fi password parameter to the camera..